SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63863

HIGH · CVSS 8.8 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the graphics device management subsystem, specifically the gpusvm notifier lock, which has an unbalanced lock/unlock scenario. This flaw can lead to potential denial of service or system instability due to improper handling of synchronization mechanisms. Organizations using Linux systems, particularly those relying on graphics processing capabilities, should prioritize patching this vulnerability to mitigate risks associated with system crashes or unpredictable behavior.

CVE
CVE-2026-63863
Severity
HIGH
CVSS
8.8
EPSS
0.11%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() There is a unbalanced lock/unlock to gpusvm notifier lock: [ 931.045868] ===================================== [ 931.046509] WARNING: bad unlock balance detected! [ 931.047149] 6.19.0-rc6+xe-**************** #9 Tainted: G U [ 931.048150] ------------------------------------- [ 931.048790] kworker/u5:0/51 is trying to release lock (&gpusvm->notifier_lock) at: [ 931.049801] [<ffffffffa090c0d8>] drm_gpusvm_scan_mm+0x188/0x460 [drm_gpusvm_helper] [ 931.050802] but there are no more locks to release! [ 931.051463] The drm_gpusvm_notifier_unlock() sits under err_free label and the first jump to err_free is just before calling the drm_gpusvm_notifier_lock() causing unbalanced unlock.